$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa File: 31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa (raw, json) Hash identifier: FhtHAzA5LhJ6t7IHIAGLv9sMgz0uYGyeXPjmebj2qbM= Subject key identifier: B8:23:21:44:77:C5:49:35:DF:CB:A5:B1:8D:46:61:B2:74:35:D3:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7644B8FDFFD3E795CD1770 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa Signing time: Thu 19 Jun 2025 14:39:11 +0000 ROA not before: Thu 19 Jun 2025 14:39:11 +0000 ROA not after: Wed 17 Sep 2025 14:39:11 +0000 asID: 22773 IP address blocks: 72.208.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:76:44:b8:fd:ff:d3:e7:95:cd:17:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:39:11 2025 GMT Not After : Sep 17 14:39:11 2025 GMT Subject: CN=d971d1e6-9b05-44bc-9cce-a73b991d7733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:08:35:4b:61:33:37:45:c3:03:ca:94:ef: a0:af:62:aa:90:2a:56:ed:76:a1:52:62:61:94:2c: 14:0e:00:01:43:89:e2:12:a9:8b:1b:9a:47:bb:5c: c8:70:5d:f1:44:7c:43:c3:1f:fb:c3:54:61:e3:17: e5:6b:8f:35:75:9a:42:02:a3:bc:b1:bb:f5:1a:74: ca:81:8a:0c:8b:b3:a9:84:97:ea:3e:87:ab:27:d3: cd:84:c2:d7:00:77:fe:a9:18:9e:b0:e4:4c:06:f0: 69:c2:a2:cc:2a:4c:f7:bc:10:97:e1:74:8a:00:0a: 71:ba:6b:10:44:a2:ef:eb:38:e6:64:4c:7c:9b:cd: f2:fd:ae:50:dd:7c:c6:1c:22:31:cd:f6:40:fa:8c: d1:1c:72:c8:9a:69:bd:03:3d:a4:f7:34:0a:f7:88: 6f:b8:fd:b3:f6:5a:54:b2:1b:1d:f6:d7:2c:c9:af: c6:c1:e0:68:ca:11:33:8b:b6:b4:d3:f4:04:89:32: da:f0:3b:6e:f3:a7:17:01:ac:5f:c0:76:64:dc:3e: 3a:c5:ac:ce:21:76:9e:8c:fa:c9:41:4c:eb:ca:8a: 04:3a:ee:58:79:e8:25:8c:62:3a:0a:ed:6b:f1:61: a3:48:93:4f:66:bb:90:d5:d8:1b:e5:b0:c5:b4:07: f5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:21:44:77:C5:49:35:DF:CB:A5:B1:8D:46:61:B2:74:35:D3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f4e496-6a37-36f1-a55c-8bab4cf47caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:80:59:08:6f:d8:27:42:dd:16:08:38:d4:43:b1:c9:2d:e0: 81:f7:71:8f:3f:f8:53:c9:b9:77:7b:c3:04:5f:83:9f:b3:74: 91:7e:5a:1a:7c:d1:a0:6a:59:2b:d6:01:51:b5:88:ab:bc:74: 0a:2e:79:b9:70:ba:79:e4:35:d0:5f:51:e4:e8:31:fa:c3:38: 49:03:7d:d8:b5:15:5c:de:e0:1f:38:82:e1:d6:fc:46:3f:61: a0:cf:33:0a:ee:08:ce:ca:1a:86:80:e2:2f:85:0f:38:66:d0: 12:55:73:2c:77:09:d8:88:7c:39:0b:a5:3d:1a:77:9d:35:01: ae:5f:d4:d9:8f:e1:b2:ea:e4:2f:8c:01:fc:f5:84:46:55:5a: 20:9f:4c:4e:16:75:ef:c3:d3:bd:5c:cf:61:20:78:df:c3:77: 58:1b:07:0b:0d:78:98:30:89:69:20:0d:90:c4:be:b4:44:88: 65:bc:59:50:cf:ba:97:21:87:bd:9b:b0:27:1c:e9:da:87:7d: ca:03:2a:49:b5:ee:17:df:eb:38:f0:33:f4:89:4a:58:37:da: fd:99:fc:d7:66:72:62:53:74:37:a6:f8:8c:6c:ab:a2:4b:04: 82:03:15:b9:8a:e5:7c:fb:ef:57:87:84:28:18:57:db:2a:60: e5:c5:6b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dkS4/f/T55XNF3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzkxMVoXDTI1MDkxNzE0MzkxMVowLzEtMCsGA1UEAxMk ZDk3MWQxZTYtOWIwNS00NGJjLTljY2UtYTczYjk5MWQ3NzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24IINUthMzdFwwPKlO+gr2KqkCpW7XahUmJh lCwUDgABQ4niEqmLG5pHu1zIcF3xRHxDwx/7w1Rh4xfla481dZpCAqO8sbv1GnTK gYoMi7OphJfqPoerJ9PNhMLXAHf+qRiesORMBvBpwqLMKkz3vBCX4XSKAApxumsQ RKLv6zjmZEx8m83y/a5Q3XzGHCIxzfZA+ozRHHLImmm9Az2k9zQK94hvuP2z9lpU shsd9tcsya/GweBoyhEzi7a00/QEiTLa8Dtu86cXAaxfwHZk3D46xazOIXaejPrJ QUzryooEOu5YeegljGI6Cu1r8WGjSJNPZruQ1dgb5bDFtAf10wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgjIUR3xUk138ulsY1GYbJ0NdMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFmNGU0OTYtNmEzNy0z NmYxLWE1NWMtOGJhYjRjZjQ3Y2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNBhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyAWQhv2CdC3RYIONRDsckt4IH3cY8/+FPJuXd7wwRfg5+zdJF+Whp8 0aBqWSvWAVG1iKu8dAoueblwunnkNdBfUeToMfrDOEkDfdi1FVze4B84guHW/EY/ YaDPMwruCM7KGoaA4i+FDzhm0BJVcyx3CdiIfDkLpT0ad501Aa5f1NmP4bLq5C+M Afz1hEZVWiCfTE4Wde/D071cz2EgeN/Dd1gbBwsNeJgwiWkgDZDEvrREiGW8WVDP upchh72bsCcc6dqHfcoDKkm17hff6zjwM/SJSlg32v2Z/NdmcmJTdDem+Ixsq6JL BIIDFbmK5Xz771eHhCgYV9sqYOXFa2k= -----END CERTIFICATE-----Generated at Mon Jun 30 18:17:36 2025 by rpki-client